fix: move MLFLOW_FLASK_SERVER_SECRET_KEY to container env

The secret key should only be set in the main MLflow server container,
not in init containers. Moving it from env.configMap to env.container
prevents the mlflow-database-upgrade init container from failing.

Bump chart version to 0.4.9.

Author: chris-sanders

applications/mlflow/charts/mlflow/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: mlflow
 description: A Helm chart for MLflow - Open source platform for the machine learning lifecycle.
 type: application
-version: "0.4.8"
+version: "0.4.9"
 appVersion: "3.3.2"
 home: https://github.com/mlflow/mlflow/tree/master/charts/mlflow
 sources:

applications/mlflow/charts/mlflow/values.yaml

@@ -64,9 +64,7 @@ mlflow:
   # -- Extra environment variables in mlflow container
   env:
     # Extra environment variables sourced via ConfigMap
-    configMap:
-      # Required for MLflow 3.x with basic auth enabled
-      MLFLOW_FLASK_SERVER_SECRET_KEY: "change-me-in-production"
+    configMap: {}
     # ENV_NAME_1: value
     # ENV_NAME_2: value
 
@@ -75,8 +73,11 @@ mlflow:
     # ENV_NAME_1: value
     # ENV_NAME_2: value
 
-    # Extra environment variables in mlflow container
-    container: []
+    # Extra environment variables in mlflow container (not in init containers)
+    # Required for MLflow 3.x with basic auth enabled
+    container:
+      - name: MLFLOW_FLASK_SERVER_SECRET_KEY
+        value: "change-me-in-production"
     # - name: extra-env-name-1
     #   value: extra-env-value-1
     # - name: extra-env-name-2

applications/mlflow/release/mlflow-chart.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   chart:
     name: mlflow
-    chartVersion: 0.4.8
+    chartVersion: 0.4.9
   weight: 10
   helmUpgradeFlags:
     - --wait

applications/mlflow/tests/helm/nodeport-ingress-disabled.yaml

@@ -15,7 +15,8 @@ mlflow:
     nodePort: 30080
     # Service port name
     name: http
-  # Environment configuration
+  # Environment configuration (only for main container, not init containers)
   env:
-    configMap:
-      MLFLOW_FLASK_SERVER_SECRET_KEY: "change-me-in-production"
+    container:
+      - name: MLFLOW_FLASK_SERVER_SECRET_KEY
+        value: "change-me-in-production"